4.2 Accessing the Correlation User Interface

NOTE:You must have the Manage Correlation Engine and Rules permission to access the Correlation interface.

  1. Log in to the Sentinel Web interface as a user with the Manage Correlation Engine and Rules permission.

    https://<IP_Address/DNS_Sentinel_server:8443>
    

    IP_Address/DNS_Sentinel_server is the IP address or DNS name of the Sentinel server and 8443 is the default port for the Sentinel server.

  2. In the navigation panel, click Correlation.

    The Correlation panel is displayed. For more information, see Section 4.3.1, Correlation Panel.

You can also access the Correlation user interface from the search results panel. For information on creating Correlation rules from the search results panel, see Section 4.4.5, Creating Correlation Rules From Search Results.